Description

It was detected that your web application uses HTTP protocol, but doesn't automatically redirect users to HTTPS.

Remediation

It's recommended to implement best practices of HTTP Redirection into your web application. Consult web references for more information

References

HTTP Redirections

Related Vulnerabilities

Content Security Policy (CSP) Nonce Without Matching Script Block

Cookies with Secure flag set over insecure connection

Incorrect Content Security Policy (CSP) Implementation

Wildcard Detected in Domain Portion of Content Security Policy (CSP) Directive

No SAML Respose signature check

Severity

Medium

Classification

CWE-16 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Sensitive Data Not Over Ssl